Strategic Information Security Officer | Risk & Compliance

Qatar Stock Exchange; Doha; On-site; QAR 250,000 - 450,000; Full time

Job summary

Qatar Stock Exchange is seeking an Information Security Officer to identify and assess information security risks and develop policies, procedures, and technical standards protecting information assets.

Reporting to the Director of Risk Management, the role designs, plans, and implements internal controls with a focus on technical security and maintains a corporate-wide information security management program aligned to regulatory and industry standards.

Qualifications

• Bachelor's degree in IT or CS required; CISSP/CISM desirable.
• 5+ years of information security experience.
• Knowledge of ISO 27001, ITIL, COBIT, NIA and national cyber security frameworks.
• Strong skills in AD, network security, encryption, vulnerability assessment, and penetration testing.

Responsibilities

• Establish and maintain a corporate-wide information security management programme.
• Design, implement, and monitor IT risk management and security policies.
• Lead auditing and compliance initiatives.
• Identify, assess IT security risks and control weaknesses.
• Plan penetration tests and oversee remediation of gaps.
• Train staff and engage stakeholders on information risk.

Skills

Active Directory

Network security

Encryption

Vulnerability assessment

Penetration testing

Web services security

Incident response

Education

Bachelor's degree in IT or CS

CISSP or CISM certification desirable

Job description

Qatar Stock Exchange is seeking an Information Security Officer to identify and assess information security risks and develop policies, procedures, and technical standards protecting information assets.

Reporting to the Director of Risk Management, the role designs, plans, and implements internal controls with a focus on technical security and maintains a corporate-wide information security management program aligned to regulatory and industry standards.